CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-118607Alpine iLX-F511 diagapp Command Injection VulnerabilityAlpine iLX-F511
- CVE-2026-103506SSO settings authorization bypassGrafana Enterprise · Grafana OSS
- CVE-2026-118606Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118605Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-88858Server-side expression parser denial of serviceGrafana OSS · Grafana Enterprise
- CVE-2026-118604Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118603Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118602Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation VulnerabilityAlpine iLX-F511
- CVE-2026-118601Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-88967Azure Monitor access token disclosure via SSRFGrafana Enterprise · Grafana OSS
- CVE-2026-100105Alerting contact point authorization bypass via schema downgradeGrafana Enterprise · Grafana OSS
- CVE-2026-117626Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for…Jenkins Project Jenkins
- CVE-2026-117625A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain…Jenkins Project Jenkins
- CVE-2026-117624Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked…Jenkins Project Jenkins
- CVE-2026-117623Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries…Jenkins Project Jenkins
- CVE-2026-117622Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the…Jenkins Project Jenkins
- CVE-2026-117621Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file…Jenkins Project Jenkins
- CVE-2026-117620Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old…Jenkins Project Jenkins
- CVE-2026-117619Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API…Jenkins Project Jenkins
- CVE-2026-117618In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the…Jenkins Project Jenkins
- CVE-2026-117617Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its…Jenkins Project Jenkins
- CVE-2026-117616Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name…Jenkins Project Jenkins
- CVE-2026-117615Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing…Jenkins Project Jenkins
- CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by…Jenkins Project Jenkins
- CVE-2026-117613Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers…Jenkins Project Jenkins
- CVE-2026-117612Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to`…Jenkins Project Jenkins
- CVE-2026-114349Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batchesApache Software Foundation org.apache.kafka:kafka_2.11 ·… +1
- CVE-2026-112375Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigsApache Software Foundation org.apache.kafka:kafka
- CVE-2026-116593Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpointApache Software Foundation org.apache.kafka:connect-runtime
- CVE-2026-115644Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST ExtensionsApache Software Foundation org.apache.kafka:connect-runtime